$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa File: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (raw, json) Hash identifier: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8= Subject key identifier: 00:A5:D8:B5:21:A7:97:08:A9:E6:58:92:15:B8:D2:E3:B5:9B:3D:C1 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 24BC817D7227FE1127E13BC9E8A2BB990061236A Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa Signing time: Sun 03 May 2026 02:51:37 +0000 ROA not before: Sun 03 May 2026 02:46:37 +0000 ROA not after: Sun 02 May 2027 02:51:37 +0000 asID: 138102 IP address blocks: 103.125.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bc:81:7d:72:27:fe:11:27:e1:3b:c9:e8:a2:bb:99:00:61:23:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: May 3 02:46:37 2026 GMT Not After : May 2 02:51:37 2027 GMT Subject: CN=00A5D8B521A79708A9E6589215B8D2E3B59B3DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:0f:65:69:a8:f1:0f:2c:53:e8:98:6a:1b: 28:37:f4:21:c4:0f:f7:59:99:4e:99:26:26:e9:20: ca:36:45:5d:3a:94:36:5f:f3:c2:b9:26:c2:cc:2b: e7:c9:2e:21:57:8a:24:53:5c:fd:42:09:9b:58:78: 12:3d:ee:38:df:2e:63:f6:56:75:57:d8:db:4b:34: 80:70:a1:eb:20:6f:4f:47:47:08:43:09:1b:b1:3c: 8d:25:0c:a0:24:20:b9:67:53:cc:1c:a8:0f:cf:03: 33:14:50:17:2a:20:5d:e6:ed:0d:1b:8b:f7:c1:c4: cb:6f:2a:a2:de:8b:7b:18:ce:25:33:43:91:f2:6e: 40:db:24:a2:5d:a7:29:e8:d8:85:b0:12:3b:09:ca: 1c:db:5a:ee:5a:12:de:df:34:d6:0b:c4:69:13:2d: b0:fc:7b:74:ca:df:cd:cf:4d:81:f1:0e:50:5b:b2: bd:d0:78:0f:aa:48:09:da:94:01:86:d0:95:9e:28: 30:3e:25:b3:32:8a:ee:fc:76:4f:0d:12:2d:33:19: e7:62:4d:83:fb:c7:6c:dd:7d:e5:c3:de:9f:13:f7: f7:71:51:f8:dd:93:85:af:f4:e0:fa:fb:b9:d0:af: ad:2f:1c:29:e1:06:d6:b4:ff:38:60:7c:b3:82:32: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A5:D8:B5:21:A7:97:08:A9:E6:58:92:15:B8:D2:E3:B5:9B:3D:C1 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.116.0/24 Signature Algorithm: sha256WithRSAEncryption 39:18:0c:c2:cc:90:69:3c:a5:72:1b:24:a5:f3:ea:78:52:a0: 1d:04:62:92:b8:c3:32:82:69:59:aa:11:06:d6:86:e6:d2:e0: 5b:a3:34:be:38:c7:c2:46:aa:ce:0d:2d:67:a1:6f:e3:b4:56: 3b:75:32:5e:9a:68:77:9f:a0:c5:fe:f0:71:31:61:cf:84:45: 10:0b:c1:c3:00:2d:1e:55:0e:74:95:da:3b:25:86:60:e7:6f: ce:a7:f1:c0:d9:23:3d:c0:a2:5c:a6:55:33:f6:8c:a7:4d:13: d3:95:81:e6:0c:e6:29:10:a9:2c:17:e1:e9:58:06:e4:fd:36: bf:b6:3a:af:39:4e:d0:18:9d:8e:4c:ab:f3:74:a3:00:01:45: cc:f2:88:d3:09:2a:cb:d2:ea:5c:dd:9a:b0:1f:db:89:10:09: 1b:77:89:70:25:09:de:69:0a:95:1b:9e:35:e2:a5:3e:ad:57: 5d:22:02:39:b8:ba:cf:6b:20:fd:12:62:56:40:b0:fc:c1:2b: ce:cf:23:9c:55:05:13:7e:d7:0a:db:b2:d6:17:fd:18:41:c8: ac:bd:1a:68:6a:3d:c9:a6:08:72:d2:01:03:52:9d:91:47:e2: 73:6a:01:1d:9d:f9:5e:80:84:4e:30:09:d4:cf:fb:89:23:6d: ed:bd:13:c5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJLyBfXIn/hEn4TvJ6KK7mQBhI2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA1MDMwMjQ2MzdaFw0yNzA1MDIwMjUxMzdaMDMxMTAvBgNV BAMTKDAwQTVEOEI1MjFBNzk3MDhBOUU2NTg5MjE1QjhEMkUzQjU5QjNEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMg9laajxDyxT6JhqGyg39CHE D/dZmU6ZJibpIMo2RV06lDZf88K5JsLMK+fJLiFXiiRTXP1CCZtYeBI97jjfLmP2 VnVX2NtLNIBwoesgb09HRwhDCRuxPI0lDKAkILlnU8wcqA/PAzMUUBcqIF3m7Q0b i/fBxMtvKqLei3sYziUzQ5HybkDbJKJdpyno2IWwEjsJyhzbWu5aEt7fNNYLxGkT LbD8e3TK383PTYHxDlBbsr3QeA+qSAnalAGG0JWeKDA+JbMyiu78dk8NEi0zGedi TYP7x2zdfeXD3p8T9/dxUfjdk4Wv9OD6+7nQr60vHCnhBta0/zhgfLOCMv/lAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAKXYtSGnlwip5liSFbjS47WbPcEwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwZGUyMzFmLWZiOGEtNDI3YS1h YTM2LTBhM2ZjOTcyMzI4ZC8wLzMxMzAzMzJlMzEzMjM1MmUzMTMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfXQwDQYJ KoZIhvcNAQELBQADggEBADkYDMLMkGk8pXIbJKXz6nhSoB0EYpK4wzKCaVmqEQbW hubS4FujNL44x8JGqs4NLWehb+O0Vjt1Ml6aaHefoMX+8HExYc+ERRALwcMALR5V DnSV2jslhmDnb86n8cDZIz3AolymVTP2jKdNE9OVgeYM5ikQqSwX4elYBuT9Nr+2 Oq85TtAYnY5Mq/N0owABRczyiNMJKsvS6lzdmrAf24kQCRt3iXAlCd5pCpUbnjXi pT6tV10iAjm4us9rIP0SYlZAsPzBK87PI5xVBRN+1wrbstYX/RhByKy9GmhqPcmm CHLSAQNSnZFH4nNqAR2d+V6AhE4wCdTP+4kjbe29E8U= -----END CERTIFICATE-----Generated at Wed May 13 04:03:13 2026 by rpki-client